Description

Unable to use anything that starts with php (Note the space after php).

How to reproduce the misbehavior (-> curl call)

curl -i "https://sandbox.coreruleset.org/?s=php%20"
curl -i "https://sandbox.coreruleset.org/?s=php%20something"

Your Environment

• CRS version : v4.5.0
• Paranoia level setting (e.g. PL1) : default
• ModSecurity version (e.g., 2.9.6): 3.0.12
• Web Server and version or cloud provider / CDN (e.g., Apache httpd 2.4.54): Openresty 1.21.4.4
• Operating System and version: Ubuntu 22.04

Confirmation

• I have removed any personal data (email addresses, IP addresses,
  passwords, domain names) from any logs posted.